#Japan #Tokyo #AI Security #AgenticSec #TISI

AgenticSec's AI Solutions Strengthen Financial Security at TISI

In a significant development, AgenticSec Co., Ltd., headquartered in Shibuya, Tokyo, has partnered with TISI Co., Ltd., based in Shinjuku, Tokyo, to enhance security operations in the financial sector. TISI's AI Security Control Plane now utilizes AgenticSec's advanced products—AgenticSec DevSecOps and AgenticSec Pentest—to bolster security verification processes.

Overview of the AI Security Control Plane

The AI Security Control Plane serves as a comprehensive operational framework that integrates various security elements such as vulnerability data, system infrastructure configurations, application materials, and existing security products' diagnostics and monitoring information. Utilizing AI, this platform enables continuous risk assessment and prioritization of responses, effectively shaping the security landscape for TISI. TISI's expertise in the design and integration of the system, combined with AgenticSec's AI-driven security verification, creates a robust and dynamic security model.

AgenticSec plays a crucial role by verifying whether detected vulnerabilities constitute valid attack paths within target systems. The AgenticSec DevSecOps tool aggregates and organizes critical information related to information asset management, threat intelligence, past diagnostics, and penetration testing results. Meanwhile, the AgenticSec Pentest solution employs an attacker-perspective AI agent to ascertain the actual exploitability of identified vulnerabilities, thus aiding in determining the urgency of necessary responses.

Background Behind the Adoption

With the rapid evolution of generative AI, the sophistication and speed of vulnerability discovery and attack methodologies have significantly increased. In critical infrastructures like financial systems, there is an urgent need to manage vast amounts of vulnerability information and indicators of attack using limited personnel, requiring swift responses.

Therefore, it has become paramount to assess the validity of detected vulnerabilities under actual conditions and to prioritize responses accurately. Traditional human-centric penetration testing often incurs high costs and is conducted infrequently, while associated information tends to be scattered, complicating ongoing validation. This highlights the necessity for a cohesive and continuous system for detecting, verifying, addressing, and re-validating vulnerabilities.

As part of a broader strategy, TISI unveiled its next-generation payment platform, PAYCIERGE, on July 29, 2026, which combines vertical AI and specialized personnel in the field of digital payment solutions. The AI Security Control Plane is integral to this strategy, marking a critical innovation in enhancing response capabilities against evolving cyber threats. By integrating the expertise TISI has gathered in financial and payment systems with AgenticSec’s data management and AI penetration test technology, this collaboration sets the stage for robust security solutions.

The Role of AgenticSec in the AI Security Control Plane

AgenticSec’s approach features distinct components that contribute to the overall system:
1. Connecting Information and Security Operations: AgenticSec DevSecOps - This product organizes and triages data from various sources, including asset management information, threat intelligence, code repositories, past diagnostics reports, and outputs from existing vulnerability scanners and security products, alongside penetration testing results. Continuous accumulation and updating of verification results help in determining subsequent targets and necessary actions.
2. Proving Attack Validity with AI: AgenticSec Pentest - An attacking agent powered by AI automates the execution of vulnerability assessments and penetration testing. This solution not only detects vulnerabilities but also verifies whether the identified attack paths are, in fact, plausible. Results are made available through a web interface, PDF reports, and reproducible commands, thereby assisting security professionals and developers in review and corrective actions.
3. Integrating Detection and Validation into a Unified Loop - The combination of both products supports the verification of vulnerabilities detected by existing tools, establishing if they can lead to actual attacks. This integration helps streamline the process from prioritizing responses to verifying corrections, continually adapting to system upgrades and new threat intelligence, thereby transforming infrequent assessments into consistent operational security.

AgenticSec will spearhead the connections and triaging aspects while TISI focuses on the overall system design, integration, and operational support.

Future Prospects

Looking ahead, AgenticSec is committed to driving the realization of the AI Security Control Plane alongside TISI, establishing a continuous security risk verification model within the financial sector. Through practical implementation, both companies aim to enhance verification capabilities and operational models, with the long-term goal of extending these solutions to a wider array of enterprises, particularly within the financial industry.

In a closing note, Yuta Seki, the head of the Service Platform Division at TISI's Digital Innovation Division, remarked on the pressing need for defensive measures to evolve alongside the accelerating pace of cyber threats driven by AI advancements. He expressed optimism about AgenticSec’s autonomous attack path exploration and verification technology, emphasizing its potential to redefine vulnerability responses from a point-based approach to a continuous line of defense. TISI is poised to merge AgenticSec’s cutting-edge technology with its operational expertise in mission-critical areas to establish a pioneering security operation model that perpetually safeguards essential systems for clients.